The Smart Slider 3 plugin for WordPress is vulnerable to Directory Traversal in all versions up...
CVE-2026-9197
The Smart Slider 3 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.5.1
#cwe-22
共收录 2819 条相关情报。
← 返回所有主题The Quick Playground plugin for WordPress is vulnerable to Path Traversal in all versions up to,...
CVE-2026-2500
The Quick Playground plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.4. T
The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to Arbitrary File...
CVE-2026-7565
The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to Arbitrary File Read via Directory Travers
The Smart Slider 3 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.5.1.36 via the replaceHTMLImage function. This makes it poss...
CVE-2026-9197
CVE-2026-9197 是 WordPress 插件 Smart Slider 3 中的一个目录遍历漏洞，影响所有版本直至 3.5.1.36。该漏洞存在于 replaceHTMLImage 函数中，由于对用户输入的路径过滤不严，使得拥有
The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to Arbitrary File Read via Directory Traversal in all versions up to, and including, 4.1.4 via the 'i...
CVE-2026-7565
CVE-2026-7565 涉及 WordPress 插件 LearnPress – Backup & Migration Tool 版本 4.1.4 及之前版本中的一个任意文件读取漏洞。该漏洞源于对 'import-user-file'
The Quick Playground plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.4. This is due to the `qckply_data()` function passing the us...
CVE-2026-2500
WordPress 的 Quick Playground 插件（版本 1.3.4 及之前）存在路径遍历漏洞。漏洞源于 `qckply_data()` 函数在处理用户提供的 `filename` POST 参数时，直接将其传递给 `file_
The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to...
CVE-2026-9290
The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in al
A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium...
CVE-2026-11431
A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and A
A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise...
CVE-2026-11429
A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. Th
MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage...
CVE-2026-11416
MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage download handlers where
The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.17 via the (profile ...
CVE-2026-9290
CVE-2026-9290 是 WordPress 插件 WP User Manager（用户资料构建器与会员管理）中的本地文件包含漏洞。该插件所有版本至 2.9.17 均受影响，漏洞位于 profile template scope 功能
A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted pat...
CVE-2026-11431
A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and A
A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. The service accepts a sequence of post-clone file-manipulat...
CVE-2026-11429
A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. Th
MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage download handlers where the local destination path is constructed by concatenati...
CVE-2026-11416
MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage download handlers where
A path traversal vulnerability exists in the Altium Enterprise Server Collaboration Service due...
CVE-2026-11423
A path traversal vulnerability exists in the Altium Enterprise Server Collaboration Service due to improper handling of
A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in...
CVE-2026-11414
A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in the Vault service. Beca
Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise...
CVE-2026-11420
Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise Server allow an unauth
A path traversal vulnerability exists in the Altium Enterprise Server Vault Service...
CVE-2026-11419
A path traversal vulnerability exists in the Altium Enterprise Server Vault Service UploadController due to improper val
A path traversal vulnerability exists in the Altium Enterprise Server Collaboration Service due to improper handling of user-supplied filenames in the MCAD and Simulation file d...
CVE-2026-11423
A path traversal vulnerability exists in the Altium Enterprise Server Collaboration Service due to improper handling of
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an Authenticated Local File Inclusion (LFI) vulnerability in the HAXCMS saveOutline...
CVE-2026-46397
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an Authenticated Local Fil